India's Ministry of Defence data breached via SQL injection flaw, sold online
Learn More
A significant data breach was reported involving India's Ministry of Defence (MoD). According to CyberPeace research, approximately 1.8 million records have been compromised and are currently being sold on underground forums for $3,000. The breached data includes:
- Names
- Phone numbers
- Personnel codes
- Passwords
Preliminary investigations attribute the breach to a vulnerability in the National Informatics Centre (NIC) systems, leading to an SQL injection attack. This incident underscores severe weaknesses in the security measures protecting critical government data.
The breach has not been confirmed by officials.
Affected personnel should immediately change their passwords and use strong, unique passwords for different accounts and implement MFA to add an extra layer of security.
